DextLaunch - Can only launch dexts from a verified SIP protected path

With the current version of Big Sug (Intel and Apple Silicon), our previously working DriverKit Extension now fails when we plug in our USB test device.

Any suggestions would be welcome.

This is with freshly built and notarized app bundles and with a previously built and notarized bundle that was tested to work correctly with the previous version of Big Sur.

The installation application can successfully activate the bundle.

Code Block
--- com.apple.system_extension.driver_extension
enabled active teamID bundleID (version) name [state]
* F7XQY5N68B com.belcarra.logitech-driverkit (0.1.1/0.1.1) com.belcarra.logitech-driverkit [activated waiting for user]

We see this error in the system log when the DextLaunch() call fails.

Code Block
Received kext load notification: com.apple.driver.usb.cdc
kernelmanagerd[97:2578] Error occurred while handling request "DextLaunch(arguments: Optional(["Driver Extension Server Tag": 4294969558, "CFBundleIdentifier": com.belcarra.belcarra-driverkit-bigsur, "Driver Extension Server Name": com.belcarra.driverkit.musblan, "Check In Token": 22331]))": Invalid argument: Can only launch dexts from a verified SIP protected path

If I reboot and disable SIP, everything works correctly.

Feedback: FB8963751


Replies

I have also seen this on Big Sur 11.3 (20E5172i). Which version are you using?
This appears to have been fixed in a subsequent release of Big Sur.